Risk Management in PostgreSQL Sicherheitslücke: Gitlab patcht (noch) nicht

A major PostgreSQL-Sicherheits issue emerged on November 18th and patches were never used on GitLab. A Lücken is a non-privileged Angreifern and will change the Code in Datenbank.

Anzeige

Postgres stuft killed Sicherheitsloch CVE-2024-10979 through 8.8 CVSS-3.0-Scale from ein to 10. User can manage PATH and specify different codes using System variables.

Postgres hat Lücken bereits Mit einem Gefixt Update and Versions 12.21, 13.17, 14.14, 15.9, 16.5 and 17.1 are equally valid. We have a data source in GitLab along with something else, and that’s an important thing for us. Versions 14.11 and 16.4 have been updated and Updates Verzögert.

Create a Stellungnahme account using GitLab. You can never do anything else.

(WHO)